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IN TEE CLAIMS 

Please amend the claims as provided below. All pending claims have heen 
reproduced fo. the convenience of the Examiner. 

1 . (Cui rently Amended) A method for granting access to a protected area of a 
storage device from a calling process, comprising the steps of: 

causinii; a calling process desiring to gain access to the protected area to locate an 
interface that ] -ermits access to the protected area; 

causinj^ the calling process to use the interface to create a trusted relationship 
between the cc Uing process and system firmware; 

once this trusted relationship has been established, allowing the calling process to 
retrieve a direc tory of service areas in the protected area; 

allowir g access to one or more service areas in the protected area; 

process ing data contained in the one or more service areas; and 

closing the protected area when processing of data in the one or more service 
areas is complc te. 

2. (Cun ently Amended) The method recited in Claim 1 wherein the trusted 
relationship coi aprises the steps of: 

sending a public key to the system firmware; 

modifying the public key using a private key using the system finnware; 
causing the calling process to validate the modified key; 
causing the system finnware to issu e s issue a pubUc key to the calling process; 
modifying the public key using the private key using the calling process; 
causing the system firmware to validate the new kej^ and 
if the kc y is not validated, granting not denving access to the protected area; and 
if the ke y is validated, granting access to the protected area. 
\ 

3. (Orif.inal) The method recited in Claim 1 wherein the step of allowing access 
to the one or more service areas comprises the steps of: 

reaimin i a handle from the system finnware to the calling process once the 
system firmwar..? has learned to trust the calling process; 
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modif ndng the handle using the calling process; 

retumi Qg the modified handle to the system firmware as part of the retrieve 
directory requ est; and 

allowi' ig the calling process to locate the desired service area using the 
information re turned by the retrieve directory request. 

4. (Original) The method recited in Claim 1 wherein the step of allowing access 
to the one or u lore service areas comprises the steps of: 

retumi ng a handle jfrom the system firmware to the calling process once the 
system firmwiire has learned to trust the calling process; 
modift mg the handle using the calling process; 

retumi ig the modified handle to the system firmware as a part of a retrieve 
directory requj :st; and 

if the open request succeeds, causing the system firmware to move a SETMAX 
boundary to al low access to the requested service area, 

5. (On ipnal) The method recited in Claim 1 wherein the step of allowing access 
to the one or rr ore service areas comprises the steps of: 

returning a handle fi-om the system fiimware to the calling process once the 
system firmwane has learned to trust the calling process; 
modify ng the handle using the calling process; 

retumii'ig the modified handle to the system firaiware as a part of an open service 
area with a pas - word request; and 

if the O] en request succeeds, causing the system firmware to move a SETMAX 
boundary to allow access to the requested service area, 

6* (Cui'i-ently Amended) The method recited in Claim 1 wherein the step of 
closing the proi ected area comprises the step of: 

once th<: calling process has completed its activities in the protected area 37, 
returning the S] iTMAX address to its original boundary using a close command. 
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7. (Currently Amended) A method for granting access to a protected area of a 
storage device from a calling process, comprising the steps of: 

causiii I a calling process desiring to gain access to the protected area to locate an 
interface that ] lermits access to the protected area; 

causin 5 the caUing process to use the interface to create a trusted relation ship 
between the ciilling process and system firmware; 

once H te trusted relationship has been established, allowing access to a one or 
more service u reas in the protected area; 

procesi ing data contained in the one or more service areas; and 

closing the protected area when the processing in the one or more service areas is 
complete* 

8. (Cu rendy Amended) The method recited in Claim 7 wherein the tnasted 
relationship comprises the steps of: 

sendin^^ a public key to the system firmware; 

modify ing the public key using a private key using the system firmware; 

causing the calling process to validate the modified key; 

causing the system fimiware to ioouoG issue a public key to the calling process; 

modiify 'Dg the public key using the private key using the calling process; 

causing the system firmware to validate the new key; and 

if the ki y is not validated, not granting access to the protected area; and 

if the to y is validated, granting access to the protected area- 

9. (Ori; ^al) The method recited in Claim 7 wherein the step of allowing access 
to the one orm,?re service areas comprises the steps of: 

retumin g a handle &om the system finnware to the calling process once the 
system firmwa] e has learned to trust the calling process; 
modifyi iig the handle using tlie calling process; 

retumin g tlie modified handle to the system firmware as a part of the retrieve 
directory reque: ;t; and 
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allowi: ig the calling process to locate the desired service area using the 
informanoji rt tunied by the retrieve directory request. 

1 0. (C riginal) The method recited in Claim 7 wherein the step of allowing access 
to the one or more service areas comprises the steps of: 

retumi iig a handle from the system finnware to the calling process once the 
system finnw:ire has learned to trust the calling process; 
modif}. ing the handle using the calling process; 

retumi ig the modified handle to the system firmware as a part of a retrieve 
directory requrst; and 

if the ojjen request succeeds, causing the system firmware to move a SETMAX 
boundary to al low access to the requested service area. 

1 1 . (Original) The method recited in Claim 7 wherein the step of allowing access 
to the one or n: ore service areas comprises the steps of: 

retumitig a handle from the sjratem firmware to the calling process once the 
system firmwane has leamed to trust the calling process; 
modify ng the handle using the calling process; 

retumirig the modified handle to the system firmware as a part of an open service 
area' with a pas word request; and 

if the o]^en request succeeds, causing the system firmware to move a SETMAX 
boundary to aUv>w access to the requested service area. 

12. (Cx rrently Amended) The method recited in Claim 7 wherein the step of 
closing the proiected area comprises the step of: 

once th< calling process has completed its activities in the protected area 39^, 
returning the SJ iTMAX address to its original boundary using a close command. 

13* (CuiTently Amended) A method for granting access to a protected area of a 
storage device ! rom a calling process, comprising the steps of: 
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causin i; a calling process desiring to gain access to the protected area to locate an 
interface that i lermits access to the protected area; 

causin; ; the calling process to me the interface to create a trusted relationship 
between the culling process and system firmware; 

once tlie trusted relationship has been established, manipulating one or more 
service areas found in the protected area; and 

closing the protected area when the processing in the one or more service areas is 
complete. 

14. (C urently Amended) The metliod recited in Claim 13 wherein the trusted 
relationship coinprises the steps of; 

sending: a pubhc key to the system fiimware; 

modifying the public key usmg a private key using the system firmware; 

causing, the calling process to validate the modified key; 

causing the system firmware to issues issue a pubHc key to the calling process; 

modifying the public key using the private key using the calling process; 

causing the system firmware to validate the new key; and 

if the ki y is not validated, not granting access to the protected area; and 

if the fc:y is validated, granting access to the protected area- 

15. (Qriiginal) The method recited in Claim 13 wherein the step of allowing 
access to the oi le or more service areas comprises the steps of: 

retumii jy a handle firom the system firmware to the calling process once the 
system fiimwai e has learned to trust the calling process; 
modifying the handle using the calling process; 

retumin- j the modified handle to the system firmware as a part of the retrieve 
directory reque. ;t; and 

allowini - the calling process to locate the desired service area using the 
information reti imed by the retrieve directoiy request. 
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1 6. (Ctriginal) The method recited in Claim 13 wherein the step of allowing 
access to the c ae or more service areas comprises the steps of: 

retumidg a handle from the system finnware to the calling process once the 
system firmw^ire has learned to trust the calling process; 
modifying the handle using the calling process; 

retumi ,ig the modified handle to the system firmware as a part of a retrieve 
directory requ. ;st; and 

is the c pen request succeeds, causing the system firmware to move a SETMAX 
boundary to al low access to the request service area. 

17. (Odginal) The method recited in Claim 13 wherein the step of allowing 
access to the o' le or more service areas comprises the steps of: 

retumiiig a handle fixan the system firmware to the calling process once the 
system firmwa^'e has learned to tmst the calling process; 
modifying the handle using the calling process; 

returning the modified handle to the system firmware as a part of an open service 
area with a pas word request; and 

if die o] >en request succeeds, causing the system firmware to move a SETMAX 
boundary to allow access to the requested service area. 

18. (Ci rrently Amended) The method recited in Claim 13 wherein the step of 
closing the proi scted area comprises the step of: 

once th< calling process has^ c^ 

retmning the S.1:TMAX address to its original boundary using a close command. 
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